Java / Spring Security Vulnerability Engineer

Job Title: Java / Spring Security Vulnerability EngineerLocation: Chicago, IL (Onsite)ContractKey ResponsibilitiesJava DevelopmentDesign, develop, and maintain secure Java applications using Java 8+, Spring / Spring Boot, and RESTful APIsImplement secure coding practices aligned with OWASP Top 10 and CWE standardsWrite clean, maintainable, and testable code with a strong focus on security controlsApplication SecurityPerform Static (SAST), Dynamic (DAST), and Software Composition Analysis (SCA) on Java applicationsIdentify and remediate vulnerabilities such as:SQL InjectionCross-Site Scripting (XSS)Insecure DeserializationAuthentication & Authorization flawsConduct manual code reviews with a security focusVulnerability ManagementTriage and remediate vulnerabilities identified via tools like Fortify, Veracode, Checkmarx, SonarQube, Snyk, or OWASP Dependency-CheckPerform vulnerability risk analysis and prioritize remediation based on CVSS scoresWork with development teams to fix vulnerabilities and validate remediation